The Privacy Framework is being developed to be risk-based/outcome-based and non-prescriptive, unlike the GDPR.
Source: Threadpost